The AZ-500 exam has been retired
It was retired on August 31, 2026. It was replaced by SC-500 (Microsoft Cloud and AI Security Engineer). Go to the SC-500 study guide →
Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.
3.2.1. Virtual Network Peering and VPN Gateway
💡 First Principle: Virtual network peering connects VNets within Azure using Microsoft's backbone network. VPN gateways provide encrypted tunnels for connecting to on-premises networks or other cloud providers.
Connection Options Comparison
| Option | Use Case | Bandwidth | Encryption |
|---|---|---|---|
| VNet Peering | Azure-to-Azure same region | Very high | Not encrypted by default |
| Global VNet Peering | Azure-to-Azure cross-region | High | Not encrypted by default |
| Site-to-Site VPN | Azure to on-premises | Up to 10 Gbps | IPsec encrypted |
| Point-to-Site VPN | Individual client to Azure | Limited | IPsec/SSL encrypted |
| ExpressRoute | Private connection to Azure | Up to 100 Gbps | Not encrypted by default |
Enroll to unlock the 4 practice questions written for this section, so you can test what you just read while it is fresh.
Enroll to unlock the 2 flashcards for this section and review them on a spaced-repetition schedule.
Written byAlvin Varughese
Founder•20 professional certifications